Do I need public S3 bucket for Zappa to work?
I followed this and this tutorials on hosting assets on the bucket generated by Zappa.
Following this question I also applied the bucket policy and used ACLs enabled.
However, if bucket public access is blocked (default S3 behaviour), then I am not able to access them (for example, I am not able to get CSS for the /dev/admin page). As soon as I make the bucket public, I can retrieve them.
Question: is this expected by design? If so, I am concerned about the security implications of having a public S3 bucket.